The exercise verifies that the licence is valid and transferable, that the company holds clean compliance and anti-money laundering records, that the corporate structure and ownership match the paperwork, and that the platform, contracts, and intellectual property carry no hidden risk. A gaming acquisition rests on the licence and its compliance history, so the legal review decides the price you pay and whether the deal proceeds at all. Get it wrong and you inherit fines, a refused change of control, or a platform you cannot legally run.
This guide sets out what gaming business legal due diligence examines, the documents you request from the seller, the findings that change a deal, and how the review connects to the regulator’s approval of the new owner.
Key takeaways
- Gaming business legal due diligence confirms that the target’s licence is valid, in good standing, and capable of transferring to a new owner.
- The review covers six areas: licence and regulatory status, AML and compliance history, corporate structure, financial position, contracts and intellectual property, and the technical platform.
- The regulator must approve a change of control, so the buyer passes the same fit and proper screening that applies to a first application.
- Compliance history sets the risk. Past fines, regulatory correspondence, and unresolved player disputes follow the company to the new owner.
- Unregistered trade marks, unlicensed software, and grey-market revenue lower the value and can stop a deal.
- Run the legal review before you sign, build the findings into the purchase price, and price the cost of fixing every gap.
What gaming business legal due diligence covers
Gaming business legal due diligence spans six areas. A weakness in any one of them can affect the value of the target. First, you examine the licence and the regulator’s view of the company. Then, you review the anti-money laundering framework and its track record. You also check the corporate and ownership structure, financial accounts, commercial contracts, intellectual property, and gaming platform. A standard corporate acquisition stops at the first four. A gaming deal adds the regulatory and technical layers, because the licence is the asset that generates the revenue and the regulator controls who may hold it.
Start the review before you sign anything binding. You set the scope, request the documents, and assess the answers against the regulator’s published rules. The seller controls the data room, so you should press for primary documents rather than summaries. Ask for the licence certificate, the latest regulatory correspondence, audited accounts, and source code escrow terms. These documents carry more weight than a management presentation.
Licence and regulatory status checks
The licence drives the deal, so you verify it first. Confirm the licence number, the class, the issuing regulator, the expiry date, and the activities it permits. A Malta Gaming Authority B2C licence runs for ten years subject to ongoing compliance, while other regulators set shorter terms, so you check the renewal date and the conditions attached to it. You also confirm what the licence does not cover. A Curacao licence does not grant access to the European Union market, and a Malta B2B licence does not allow direct play with consumers, so you match the licence to the markets the target actually serves.
Read the regulator’s correspondence in full. Past enforcement action, conditions imposed on the licence, and any open investigation transfer with the company to the new owner. You also test whether the seller obtained approval for every key function holder and every shareholder who holds a qualifying interest. To understand the review a regulator runs once you apply for approval as the new controller, read our guide on what happens after submitting a gaming licence application, because the change of control assessment mirrors much of that process.
AML and compliance history in gaming business legal due diligence
Anti-money laundering controls sit at the centre of gaming business legal due diligence. You read the target’s AML and counter-terrorist-financing policy, its risk assessment, and the records that show the policy works in practice. You check that the company filed suspicious transaction reports where required, that it screened customers against sanctions lists, and that it ran enhanced due diligence on high-value players. A clean policy on paper means little if the transaction monitoring records show gaps.
Compliance history sets the risk you inherit. You request every infringement notice, fine, and settlement the regulator issued, plus the company’s remediation evidence. You also review responsible gaming controls and player fund segregation. In addition, you check how the company handles player disputes. Each area can produce a future liability. Past revenue from markets the target was not licensed to serve raises the sharpest questions, since the new owner carries the consequence. For the wider obligations that apply once you control the company, see our guide on staying compliant after a gaming licence.
Corporate structure and financial review
You map the corporate structure to the last beneficial owner. Gaming groups often run holding companies across several jurisdictions. Therefore, the legal review must confirm that you are buying the entity that holds the licence. It also checks that the shares are free from pledges and encumbrances. In addition, it confirms that the ownership chain matches the regulator’s records. An opaque structure slows the regulator’s approval of the new owner. As a result, it can raise the cost of the transaction.
On the financial side, you test the audited accounts, the player liability balance, tax filings, and the gaming duty position. You confirm that the company ring-fenced player funds correctly and that it paid every compliance contribution and licence fee on time. A Malta B2C licence carries an annual compliance contribution of 25,000 EUR and a 5,000 EUR application fee at the outset, and you check that the target met every payment so the licence stays in good standing. You also build a clear picture of recurring compliance costs, since these shape the return the acquisition produces.
Contracts, intellectual property, and technical review for gaming acquisitions
Contracts and intellectual property carry value and risk in equal measure. You review the brand trade marks, the domain registrations, and the ownership of the platform software. If the seller licenses the gaming software from a third party, read the licence terms carefully. Then, confirm that the terms survive a change of control. The World Intellectual Property Organization sets out how an intellectual property audit assesses ownership and risk across a target’s IP portfolio, and an acquisition applies that discipline to brands, software, and content. Unregistered trade marks in the markets the company serves lower the value, because a competitor can register the name first.
The technical review tests the platform a qualified specialist understands. You confirm that the random number generator holds current certification, that an approved laboratory tested the games, and that the platform meets the technical standards the regulator requires. You also check data protection compliance, payment processor agreements, and affiliate contracts, since an operator can answer to the regulator for the conduct of its affiliates. The OECD frames this kind of structured review through its due diligence guidance for responsible business conduct, which applies a risk-based method that fits a gaming acquisition well.
Gaming business legal due diligence checklist
The list below sets out the documents you request from the seller before you complete gaming business legal due diligence. Treat any refusal to supply a primary document as a finding in its own right.
- The licence certificate, the schedule of conditions, and the current renewal status
- All regulatory correspondence, infringement notices, fines, and remediation evidence for the last five years
- The AML/CFT policy, the business risk assessment, and a sample of transaction monitoring records
- The corporate structure chart, the shareholder register, and ultimate beneficial ownership declarations
- Audited accounts, management accounts, tax filings, and the player liability ledger
- Player fund segregation evidence and the reconciliation of the segregated account
- Trade mark and domain registrations across every market the company serves
- Platform ownership or software licence agreements, with the change of control terms
- Random number generator certificates and game testing reports from the approved laboratory
- Payment processor, supplier, and affiliate contracts, with termination and assignment clauses
Build the cost of fixing each gap into your offer. A missing certificate, an unregistered brand, or an unpaid compliance contribution all carry a price, and you negotiate that price into the deal rather than absorbing it after completion.
How the review shapes the acquisition and licence transfer
The findings feed directly into the transaction structure. A clean target supports a share purchase. The buyer acquires the company, and the licence stays in place subject to regulatory approval. However, regulatory problems may push the buyer toward an asset purchase or a price reduction. Nobody wants to inherit an open enforcement file. You also decide which warranties and indemnities the contract needs. The due diligence findings show where to focus them.
No gaming acquisition closes without the regulator. The authority must approve any change of control. The incoming owner must also pass the fit and proper screening that applies to a first licence. The buyer evidences source of funds. Then, the regulator screens the new shareholders and directors. The licence transfers only once that review clears. Our guide on transferring a gaming licence through acquisition sets out the approval steps in detail, and our mergers and acquisitions service manages the legal review and the regulatory approval as one process.
Findings that change a gaming acquisition deal
Some findings adjust the price, and some stop the deal. The table below groups the issues that surface most often in a gaming acquisition and the effect each one carries.
| Finding | Typical effect on the deal |
|---|---|
| Open enforcement action or unresolved regulatory investigation | Stops or pauses the deal until the matter closes |
| Revenue from markets the target was not licensed to serve | Lowers value and shifts the deal toward an asset purchase |
| Software licensed from a third party with no change of control consent | Requires renegotiation before completion |
| Unregistered brand trade marks in active markets | Reduces value and adds registration cost |
| Player fund shortfall or weak segregation | Triggers a price adjustment and an indemnity |
| Opaque ownership chain that does not match the regulator’s records | Delays change of control approval and raises legal cost |
DD Consultus runs gaming business legal due diligence from our Sliema office in Malta. In addition, the review includes licence verification, AML and compliance checks, corporate and contract analysis, and regulatory approval of the new owner. As a result, our legal services team coordinates the review and the transaction as one workstream. To discuss an acquisition, call +356 99408536 or email contact@licencegaming.com.
Frequently asked questions
What is gaming business legal due diligence?
Gaming business legal due diligence is the review a buyer runs before acquiring an online gaming operator. It verifies the licence and its compliance history, the AML framework, the corporate structure, the financial accounts, the contracts and intellectual property, and the technical platform. The findings decide the price, the deal structure, and whether the transaction proceeds.
How long does due diligence take when buying a gaming company?
A focused legal review usually runs four to eight weeks, depending on the size of the data room and the speed of the seller’s responses. Regulatory approval of the new owner takes longer and runs in parallel, since the regulator screens the incoming shareholders and directors before the licence transfers. Plan for several months from signing to completion.
Does the regulator need to approve a gaming business acquisition?
Yes. The regulator must approve any change of control of a licensed gaming company. The incoming owner passes the fit and proper assessment that applies to a first application, evidences source of funds, and clears the screening before the licence moves to the new controller. The deal completes only once that approval lands.
What are the biggest red flags in gaming due diligence?
The sharpest red flags include open enforcement action, revenue from markets the company was not licensed to serve, an opaque ownership chain, a player fund shortfall, and gaming software the target licenses without a change of control consent. Each one either lowers the value or stops the deal until the buyer resolves it.
Can you transfer a gaming licence to a new owner?
A gaming licence does not pass automatically with a sale. In a share purchase the company keeps the licence, but the regulator must approve the new beneficial owner first. The buyer applies for change of control approval, and the licence stays valid only once the regulator clears the new ownership.
Why does intellectual property matter in a gaming acquisition?
Brands, domains, and platform software hold much of a gaming company’s value. If the target leaves its trade marks unregistered or licenses its software from a third party, the buyer faces a weaker asset and a possible dispute. An intellectual property audit confirms ownership and exposes the risk before completion.
Should you choose a share purchase or an asset purchase?
A clean target with a transferable licence usually supports a share purchase, which keeps the licence and the contracts in place. A target with regulatory problems often pushes the buyer toward an asset purchase, which leaves known liabilities behind. The due diligence findings determine which structure protects the buyer.